Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/1dc960e7-1590-4f72-857b-d680ff4ade7a.roa
File:                     1dc960e7-1590-4f72-857b-d680ff4ade7a.roa (raw, json)
Hash identifier:          yocDtI5UA1NDSEoHiwvMjxi9lrCIK6AnUdSt0DIgfIA=
Subject key identifier:   10:6D:49:18:0C:F2:57:43:9A:EB:63:C4:A4:75:A2:3A:37:B3:12:FD
Certificate issuer:       /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial:       1AF16245C890C2216250A27EAC607A3CE815BAA3
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/1dc960e7-1590-4f72-857b-d680ff4ade7a.roa
Signing time:             Tue 19 May 2026 04:00:56 +0000
ROA not before:           Tue 19 May 2026 04:00:56 +0000
ROA not after:            Mon 17 Aug 2026 23:59:59 +0000
asID:                     8987
IP address blocks:        2605:9cc0:547::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:f1:62:45:c8:90:c2:21:62:50:a2:7e:ac:60:7a:3c:e8:15:ba:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
        Validity
            Not Before: May 19 04:00:56 2026 GMT
            Not After : Aug 17 23:59:59 2026 GMT
        Subject: serialNumber=d9250a3d3bca5d7e17826445daf24d4658211bf05e39ddc0a8dd3a341e055d71, CN=f7243785-46de-414b-9b8f-7a9699e979e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:a4:c0:b2:95:87:6f:a0:ec:d6:7d:70:66:1c:
                    a1:d6:91:3c:c6:5f:67:fa:8a:c9:1e:e3:4e:37:38:
                    1d:47:86:e6:29:5f:f3:fc:b4:90:6c:4d:d9:00:12:
                    e6:b7:99:80:7b:40:ce:e4:83:f3:7a:e6:e6:7c:e8:
                    44:72:f7:ca:1f:10:ba:12:4d:87:3a:62:82:d4:d0:
                    aa:ca:49:4e:bc:13:f6:48:c0:26:3c:b2:71:7f:58:
                    1e:cf:fd:58:48:0b:a7:1e:d5:01:24:3e:f9:b4:32:
                    a9:ff:4f:dc:72:c6:ec:fc:b4:6f:e2:aa:77:30:f3:
                    42:84:ee:37:e0:74:f2:c4:41:73:34:5e:82:2c:64:
                    e7:a3:22:0e:54:20:d1:c3:9c:54:22:21:e3:ea:59:
                    05:3e:7b:85:18:53:c6:21:28:5d:0a:28:c2:fa:45:
                    53:39:b3:c7:1a:5c:0b:2d:d4:08:0b:db:ae:ac:1c:
                    1d:e3:57:24:55:38:69:12:fb:56:3e:d5:b3:07:d4:
                    51:61:cb:04:19:70:2f:89:88:bf:52:a3:db:a9:59:
                    fe:d5:e9:2f:90:49:a7:fe:26:20:ed:34:c2:cb:47:
                    59:32:f7:c3:d1:75:36:f2:31:cc:37:21:29:13:03:
                    47:5e:3a:f3:e1:5c:36:15:47:27:20:0d:35:ad:76:
                    64:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:6D:49:18:0C:F2:57:43:9A:EB:63:C4:A4:75:A2:3A:37:B3:12:FD
            X509v3 Authority Key Identifier:
                keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/1dc960e7-1590-4f72-857b-d680ff4ade7a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:547::/48

    Signature Algorithm: sha256WithRSAEncryption
         70:78:47:f5:68:c9:7e:d9:e9:8e:6f:e2:2e:f6:82:5a:30:39:
         d7:be:92:72:13:99:e0:04:a9:65:0c:69:3a:bd:93:b4:92:3e:
         53:8b:a3:47:61:47:4d:ef:7f:88:22:2f:0f:8a:28:a2:53:a8:
         b4:8c:34:2b:73:2c:4e:7a:07:82:f7:46:78:76:cd:80:dd:80:
         85:0d:e7:a4:63:11:02:8a:4f:9c:24:a7:ff:be:bf:c8:d9:65:
         ef:e1:3f:bd:3e:50:a1:28:6d:37:53:9f:3e:40:ac:0f:b1:e9:
         0d:89:39:e8:7f:42:1a:90:5b:1b:dc:88:3c:c1:92:53:b1:2e:
         e4:62:a5:7a:0d:d9:fe:d3:bc:f4:31:57:45:72:bc:e5:aa:8b:
         50:6f:45:1b:91:d9:cc:0d:59:00:bf:ca:ac:0c:4e:95:34:1f:
         e6:37:d6:cd:02:2b:f4:de:fa:cb:fe:d7:bd:0e:d9:e7:9c:23:
         66:80:9f:1b:d3:b7:22:92:ad:b1:43:14:4c:1c:6c:05:cf:94:
         85:4c:78:0f:2a:1b:8d:3b:c6:12:56:1f:a5:26:8c:60:93:e8:
         c3:90:a0:4f:d0:45:a6:77:9f:e9:a6:1a:6d:65:8b:c6:7e:41:
         57:6e:21:98:fd:2e:4e:a7:9d:45:b3:5f:35:1e:8a:f4:1d:a9:
         a6:44:83:5e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Jun 13 12:42:40 2026 by rpki-client